$ rpki-client -vvf repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft File: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft (raw, json) Hash identifier: 2Cp4CPI2n6h/Ml4kYQVDD5ubHexGVbUFHHgRkkcHLaI= Subject key identifier: 3A:34:BB:DA:13:C6:74:13:D6:71:C1:69:04:BA:D6:BC:B8:E8:7E:B1 Authority key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 Certificate issuer: /CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Certificate serial: 69AC168AE1A9E5BD5A85E3022A881E80F1002969 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft Manifest number: 27 Signing time: Sun 24 Nov 2024 05:51:59 +0000 Manifest this update: Sun 24 Nov 2024 05:46:59 +0000 Manifest next update: Wed 27 Nov 2024 16:26:59 +0000 Files and hashes: 1: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: 4yHX21WHUo392SGtXw+8bz/7pbXAzszyaOP+6cp8BDY=) 2: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: ZMgOkSZ3/ZMH9Cw4ynFe0bUbUUV7q98dOonQwTKrkes=) 3: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl (hash: 55wU/T8Z92tLvISb4tkyJHv/le6WQZuthWSjXHyV+Ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ac:16:8a:e1:a9:e5:bd:5a:85:e3:02:2a:88:1e:80:f1:00:29:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Validity Not Before: Nov 24 05:46:59 2024 GMT Not After : Nov 27 16:26:59 2024 GMT Subject: CN=3A34BBDA13C67413D671C16904BAD6BCB8E87EB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b9:16:b2:01:85:89:bf:41:05:c3:ac:d4:79: 56:a2:37:c3:f3:97:d3:fd:eb:79:b7:46:54:e1:8c: 6c:84:ef:b9:0b:9f:f6:d4:ff:53:08:31:f6:ae:fc: b7:41:93:b7:ab:9d:d8:d1:61:13:95:e1:b3:03:c4: 9b:76:2a:c0:ac:08:8c:ce:a1:c9:11:d2:d1:c4:2d: 24:60:b7:1a:02:87:d5:a5:b0:6f:56:8f:10:dd:77: dc:ae:f1:28:2c:a0:ff:26:dd:fe:33:08:f6:90:af: 5b:f0:48:52:02:07:67:21:f0:a5:d9:7d:68:75:ad: 2c:00:4e:8b:6e:31:e1:07:fe:69:e6:54:59:7a:27: c7:b2:99:42:1a:99:1c:ac:f7:e7:1a:b5:46:7e:30: c7:a0:8f:b9:b0:28:6a:5b:52:51:8a:cf:57:ac:36: aa:bc:14:27:cd:3d:e8:a4:f9:b7:45:6f:7a:22:6a: e3:69:10:55:4a:f7:1f:f4:1e:3a:e3:b8:64:62:ed: 9c:54:e2:30:76:81:44:dc:81:0a:eb:b3:2f:5a:22: 57:ca:8f:47:f0:dc:61:8a:10:b7:01:01:60:86:60: c0:06:19:95:08:72:00:e2:96:29:83:8f:b2:62:24: c1:8d:77:ee:90:bc:ec:ff:65:69:2e:10:27:c4:76: 24:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:34:BB:DA:13:C6:74:13:D6:71:C1:69:04:BA:D6:BC:B8:E8:7E:B1 X509v3 Authority Key Identifier: keyid:E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d0:a6:bb:57:0b:aa:b1:f8:b0:e4:60:b1:22:da:6f:5b:08: fb:f6:6c:67:ed:31:f4:f5:c1:7b:93:6e:e4:1c:2d:64:4f:83: 0c:63:0b:47:46:8e:82:e7:94:60:1a:8c:a2:c7:79:17:67:93: a8:67:a2:f1:bf:ed:fa:b1:05:e6:2f:02:53:50:a1:a0:e3:88: 3c:6c:84:be:d6:29:1f:f2:a5:e8:65:c7:72:f9:59:37:39:40: 6c:77:56:ca:a9:c1:99:8c:12:fe:ef:11:f4:12:3a:9e:9a:82: 5a:a9:24:0d:e0:42:53:23:e7:9e:f1:ed:d7:57:8b:85:27:74: 38:cf:f1:6c:4d:66:b4:62:35:8d:ed:38:48:0e:6e:93:19:84: 55:56:c9:af:c9:ca:66:0b:72:d7:27:15:13:e0:aa:02:63:7c: fc:8e:71:ce:2d:84:99:fe:03:60:60:86:c8:b7:1c:f7:2d:58: c5:f1:30:e2:99:ce:76:f2:88:67:8e:fe:59:e0:32:a3:49:b7: 70:00:6a:5e:ed:6a:f5:ed:fb:2e:e5:2a:1d:e5:4a:63:0d:fe: 76:90:d0:74:c7:d0:cb:7f:c5:ae:dd:13:e0:e8:f2:b8:ce:63: df:95:5a:79:44:1f:8c:26:99:01:78:86:04:ae:e5:c9:21:48: 0d:43:98:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaawWiuGp5b1aheMCKogegPEAKWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJD MzZDRUU2NTAeFw0yNDExMjQwNTQ2NTlaFw0yNDExMjcxNjI2NTlaMDMxMTAvBgNV BAMTKDNBMzRCQkRBMTNDNjc0MTNENjcxQzE2OTA0QkFENkJDQjhFODdFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjuRayAYWJv0EFw6zUeVaiN8Pz l9P963m3RlThjGyE77kLn/bU/1MIMfau/LdBk7erndjRYROV4bMDxJt2KsCsCIzO ockR0tHELSRgtxoCh9WlsG9WjxDdd9yu8SgsoP8m3f4zCPaQr1vwSFICB2ch8KXZ fWh1rSwATotuMeEH/mnmVFl6J8eymUIamRys9+catUZ+MMegj7mwKGpbUlGKz1es Nqq8FCfNPeik+bdFb3oiauNpEFVK9x/0HjrjuGRi7ZxU4jB2gUTcgQrrsy9aIlfK j0fw3GGKELcBAWCGYMAGGZUIcgDilimDj7JiJMGNd+6QvOz/ZWkuECfEdiQpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOjS72hPGdBPWccFpBLrWvLjofrEwHwYDVR0j BBgwFoAU5IWKJhVHqsBlzflsIfiposNs7mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI4YWFjMy0wMDk0LTQyMWYtYTIwMS0yNGQ4MjBlMmFiM2QvMC9FNDg1OEEyNjE1 NDdBQUMwNjVDREY5NkMyMUY4QTlBMkMzNkNFRTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJDMzZD RUU2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5 QTJDMzZDRUU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzQprtXC6qx+LDkYLEi2m9bCPv2bGftMfT1 wXuTbuQcLWRPgwxjC0dGjoLnlGAajKLHeRdnk6hnovG/7fqxBeYvAlNQoaDjiDxs hL7WKR/ypehlx3L5WTc5QGx3VsqpwZmMEv7vEfQSOp6aglqpJA3gQlMj557x7ddX i4UndDjP8WxNZrRiNY3tOEgObpMZhFVWya/JymYLctcnFRPgqgJjfPyOcc4thJn+ A2Bghsi3HPctWMXxMOKZznbyiGeO/lngMqNJt3AAal7tavXt+y7lKh3lSmMN/naQ 0HTH0Mt/xa7dE+Do8rjOY9+VWnlEH4wmmQF4hgSu5ckhSA1DmEc= -----END CERTIFICATE-----Generated at Sun Nov 24 07:10:01 2024 by rpki-client on console-ams.rpki-client.org